Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-38571
HistoryJun 19, 2024 - 1:35 p.m.

CVE-2024-38571 thermal/drivers/tsens: Fix null pointer dereference

2024-06-1913:35:36
Linux
github.com
1
cve-2024-38571
thermal drivers
tsens
null pointer dereference
linux kernel
svace
calibrate_8960
compute_intercept_slope
bug fix

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

thermal/drivers/tsens: Fix null pointer dereference

compute_intercept_slope() is called from calibrate_8960() (in tsens-8960.c)
as compute_intercept_slope(priv, p1, NULL, ONE_PT_CALIB) which lead to null
pointer dereference (if DEBUG or DYNAMIC_DEBUG set).
Fix this bug by adding null pointer check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial